Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
File: rh6ygNFyKEakQSTExi0AWfYa8kI.mft (raw, json)
Hash identifier: XAQ4ssu0mECsSWJxBY0bb0WrICXUQiMzd0HjhPIhHEI=
Subject key identifier: 92:A0:EB:10:1C:78:9F:6F:E4:D9:63:92:80:34:EA:3F:AF:B5:AC:07
Authority key identifier: AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
Certificate issuer: /CN=ae1eb280d1722846a44124c4c62d0059f61af242
Certificate serial: 01992255699FE5CD76E65C8D57387621EF72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 04:00:46 +0000
Manifest this update: Sun 07 Sep 2025 04:00:46 +0000
Manifest next update: Mon 08 Sep 2025 04:00:46 +0000
Files and hashes: 1: AkkqTkgoNjucTbIenc-XdoQnIZI.roa (hash: 22rbMnk8MBt5UQAAhQP9wIF7s9K2LwR7KpEuXLLCYQA=)
2: rh6ygNFyKEakQSTExi0AWfYa8kI.crl (hash: DMxpKm4NFXfR4WmWNn4i3BRrw8pNjTXLkw5L2mlPbxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:69:9f:e5:cd:76:e6:5c:8d:57:38:76:21:ef:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1eb280d1722846a44124c4c62d0059f61af242
Validity
Not Before: Sep 7 04:00:46 2025 GMT
Not After : Sep 8 04:00:46 2025 GMT
Subject: CN=92a0eb101c789f6fe4d963928034ea3fafb5ac07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:f7:76:8c:1b:43:63:d2:eb:db:c4:d5:e6:
22:ad:39:2e:ce:91:7d:18:36:90:65:41:c3:1d:0a:
68:7f:6b:c5:a8:dd:13:a6:2b:5b:94:17:43:ef:75:
61:34:cb:c0:84:85:cc:20:f4:1d:4f:68:02:5e:02:
83:b0:db:ad:e7:9e:10:7c:b1:6b:cd:9e:f4:b6:9f:
b8:b0:6f:6a:de:73:33:64:73:6f:3f:be:56:73:46:
a8:b4:01:df:9b:99:49:70:77:5a:0d:a6:8a:66:25:
1a:e7:ba:3f:54:c8:2c:b2:26:2e:88:ef:a2:64:bd:
b8:7a:b4:85:9e:d3:65:d3:38:2c:bb:43:63:f1:05:
81:1e:c5:36:08:b9:76:ea:5a:f9:21:2b:fb:72:02:
22:6d:b3:c2:10:25:75:77:52:75:2d:2c:4f:df:b4:
b8:96:eb:4e:08:5b:a4:a9:6e:55:8f:fe:79:b0:05:
f2:03:cb:92:d6:b8:77:e2:58:b6:ff:84:ae:ef:8f:
1e:ec:ce:39:eb:f8:b5:d3:11:b7:f7:3a:50:9a:ff:
8a:ba:f8:98:f7:48:a7:f5:cb:f6:87:ab:1b:b4:a6:
0e:3b:77:bb:bf:6e:75:bc:d9:29:d2:83:44:71:1d:
c4:9a:db:b3:69:0b:c4:b8:e6:9c:e9:f5:9d:76:0b:
70:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A0:EB:10:1C:78:9F:6F:E4:D9:63:92:80:34:EA:3F:AF:B5:AC:07
X509v3 Authority Key Identifier:
keyid:AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:51:32:22:1a:83:cb:eb:23:a9:08:13:20:be:65:9b:6e:5c:
60:80:86:81:a2:e1:c5:20:5c:ce:fa:ad:7f:68:ed:73:03:4e:
04:bc:07:55:51:36:b8:7c:2e:59:b5:f7:6e:3d:1f:1b:ca:b9:
f7:21:30:8d:52:9d:66:96:bf:15:b3:ea:3e:bd:0d:d1:e8:a4:
22:47:7e:e1:0f:a9:ee:e3:d2:1f:42:a0:25:16:9e:36:57:6e:
bc:4e:ff:75:c8:64:b1:81:00:33:33:d1:e1:3e:9e:6c:ce:17:
b8:25:4f:bc:3e:30:83:64:7f:56:60:f6:c1:af:e3:9b:1c:fa:
06:cf:3d:ff:b5:11:66:de:13:b2:de:0b:af:5e:ad:5a:8d:8a:
b8:0d:76:63:81:b7:ad:6a:a7:1b:54:2f:b0:3c:68:99:fd:fa:
4f:8f:15:7c:90:dc:29:ce:db:3d:98:83:47:af:ac:66:6e:50:
e1:5c:b1:e8:2d:e0:89:d6:f4:aa:45:7b:4e:25:ae:28:8d:05:
44:45:e9:66:63:4e:05:f5:86:74:43:97:44:4e:c1:d3:74:68:
a0:78:1d:a4:b8:d8:89:be:fc:1f:e3:39:26:2b:68:81:95:6d:
b5:7b:8a:6d:1f:6c:d4:33:c4:82:a8:3f:77:cf:78:34:1a:31:
12:5c:74:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:30 2025 by rpki-client